Shibboleth & Mediawiki

[Darren Boss]

I had luck with https://www.mediawiki.org/wiki/Extension:PluggableAuth and
our Shib IdP.

This was never adopted into production however (still just using ldap auth)
and my deployment was done about a year ago so YMMV.

On Thu, Sep 19, 2019 at 9:43 AM Peter Schober <peter.schober at univie.ac.at>
wrote:

> * Marco Malavolti <marco.malavolti at garr.it> [2019-09-19 15:10]:
> > I'm here to know if any of you use Shibboleth as authentication
> > method on Mediawiki and this extension:
>
> Many, many years ago.
>
> > This is my configuration in the LocalSettings.php:
>
> I just checked but couldn't find any signs of any of those config
> files anymore. (The machines or acounts that hosted them are long
> gone, too.)
>
> >
> https://gerrit.wikimedia.org/r/plugins/gitiles/mediawiki/extensions/Shibboleth/+/master
>
> The instructions there don't give me much hope. E.g. setting
> applicationId ("Apache vhost konfig") should have absolutely nothing
> to do with that MediaWiki extension and neither would you have to
> remove that setting nor enable headers ("Apache vhost konfig FastCGI
> (FPM)") when using FPM. That all depends on /other/ (and not
> recommended) configuration that's not even mentioned there, just
> assumed to be wrong and in-place.
>
> > Thank for any help you can provide to solve this problem with groups.
>
> You've tried logging and and logging in, again, as stated in the
> "Known Bugs" section of the referenced documentation?
> (Also it seems the bug mentioned there
> https://phabricator.wikimedia.org/T184736 has meanwhile been resolved,
> though you'd have to check whether it's included in the MediaWiki
> release you're running, of course.)
>
> Other than that: If I had to guess I'd say your affiliations are
> multi-valued (though to PHP it's just one string that doesn't match
> your indidivial affiliation values) and your config/code isn't
> prepared to deal with that.
>
> -peter
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>


-- 
Darren Boss
Senior Programmer/Analyst
Programmeur-analyste principal
darren.boss at computecanada.ca
(o) 416.228.1234 x 230
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190919/32d70eee/attachment.html>